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EXECUTIVE  SUMMARY 


This  Validation  Summary  Report  (VSR)  summarizes  the  results  and  conclusions 
of  validation  testing  performed  on  the  Tolerant  Ada  Development  System 
(part  number  S-240),  Version  2.0,  using  Version  1.8  of  the  Ada®  Compiler 
Validation  Capability  (ACVC).  The  Tolerant  Ada  Development  System  is 
hosted  on  a  Tolerant  Eternity  operating  under  TX,  Release  5.2.  Programs 
processed  by  this  compiler  may  be  executed  on  a  Tolerant  Eternity  operating 
under  TX,  Release  5.2.  >  ■_  „  _  »  J  v  j  ,  •  <  ■ 

On-site  testing  was  performed  12  APR  87  through  16  APR  87  at  San  Jose  CA, 
under  the  direction  of  the  Ada  Validation  Facility  (AVF),  according  to  Ada 
Validation  Organization  (AVO)  policies  and  procedures.  The  AVF  identified 
2210  of  the  2399  tests  in  ACVC  Version  1.8  to  be  processed  during  on-site 
testing  of  the  compiler.  The  19  tests  withdrawn  at  the  time  of  validation 
testing,  as  well  as  the  170  executable  tests  that  make  use  of 
floating-point  precision  exceeding  that  supported  by  the  implementation, 
were  not  processed.  After  the  2210  tests  were  processed,  results  for  Class 
A,  C,  D,  and  E  tests  were  examined  for  correct  execution.  Compilation 
listings  for  Class  B  tests  were  analyzed  for  correct  diagnosis  of  syntax 
and  semantic  errors.  Compilation  and  link  results  of  Class  L  tests  were 
analyzed  for  correct  detection  of  errors.  There  were  8  of  the  processed 
tests  determined  to  be  inapplicable.  The  remaining  2202  tests  were  passed. 

The  results  of  validation  are  summarized  in  the  following  table: 


RESULT 


Passed 


Failed 


CHAPTER  TOTAL 

5  6  7  8  9  10  11  12  14  _ 


102  252  334  244  161  97  138  261  130  32  218  233  220 2 

00  0000000000,  0 


Inapplicable  14  73  86  3  0  0  1  1  0  0  0  0  176 

Withdrawn  05500  1  1  240  1  0  19 

TOTAL  116  330  425  247  161  98  140  264  134  32  219  233  2399 


The  AVF  concludes  that  these  results  demonstrate  acceptable  conformity  to 
ANSI/KIL-STD-1815A  Ada. 


®Ada  is  a  registered  trademark  of  the  United  States  Government 
(Ada  Joint  Program  Office). 
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EXECUTIVE  SUMMARY 


This  Validation  Summary  Report  (VSR)  summarizes  the  results  and  conclusions 
of  validation  testing  performed  on  the  Tolerant  Ada  Development  System 
(part  number  S-240),  Version  2.0,  using  Version  1.8  of  the  Ada®  Compiler 
Validation  Capability  (A CVC).  The  Tolerant  Ada  Development  System  is 
hosted  on  a  Tolerant  Eternity  operating  under  TX,  Release  5.2.  Programs 
processed  by  this  compiler  may  be  executed  on  a  Tolerant  Eternity  operating 
under  TX,  Release  5.2. 

On-site  testing  was  performed  12  APR  87  through  16  APR  87  at  San  Jose  CA, 
under  the  direction  of  the  Ada  Validation  Facility  (AVF),  according  to  Ada 
Validation  Organization  (AVO)  policies  and  procedures.  The  AVF  identified 
2210  of  the  2399  tests  in  ACVC  Version  1.8  to  be  processed  during  on-site 
testing  of  the  compiler.  The  19  tests  withdrawn  at  the  time  of  validation 
testing,  as  well  as  the  170  executable  tests  that  make  use  of 
floating-point  precision  exceeding  that  supported  by  the  implementation, 
were  not  processed.  After  the  2210  tests  were  processed,  results  for  Class 
A,  C,  D,  and  E  tests  were  examined  for  correct  execution.  Compilation 
listings  for  Class  B  tests  were  analyzed  for  correct  diagnosis  of  syntax 
and  semantic  errors.  Compilation  and  link  results  of  Class  L  tests  were 
analyzed  for  correct  detection  of  errors.  There  were  8  of  the  processed 
tests  determined  to  be  inapplicable.  The  remaining  2202  tests  were  passed. 

The  results  of  validation  are  summarized  in  the  following  table: 
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The  AVF  concludes  that  these  results  demonstrate  acceptable  conformity  to 
ANSI/MIL-STD-1815A  Ada. 


®Ada  is  a  registered  trademark  of  the  United  States  Government 
(Ada  Joint  Program  Office). 
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CHAPTER  1 


INTRODUCTION 


This  Validation  Summary  Report  (VSR)  describes  the  extent  to  which  a 
specific  Ada  compiler  conforms  to  the  Ada  Standard,  ANSI /MIL -ST D-1 815A. 
This  report  explains  all  technical  terms  used  within  it  and  thoroughly 
reports  the  results  of  testing  this  compiler  using  the  Ada  Compiler 
Validation  Capability  (ACVC).  An  Ada  compiler  must  be  implemented 
according  to  the  Ada  Standard,  and  any  implementation-dependent  features 
must  conform  to  the  requirements  of  the  Ada  Standard.  The  Ada  Standard 
must  be  implemented  in  its  entirety,  and  nothing  can  be  implemented  that  is 
not  in  the  Standard. 

Even  though  all  validated  Ada  compilers  conform  to  the  Ada  Standard,  it 
must  be  understood  that  some  differences  do  exist  between  implementations. 
The  Ada  Standard  permits  some  implementation  dependencies — for  example,  the 
maximum  length  of  identifiers  or  the  maximum  values  of  integer  types. 
Other  differences  between  compilers  result  from  characteristics  of 
particular  operating  systems,  hardware,  or  implementation  strategies.  All 
of  the  dependencies  observed  during  the  process  of  testing  this  compiler 
are  given  in  this  report. 

The  information  in  this  report  is  derived  from  the  test  results  produced 
during  validation  testing.  The  validation  process  includes  submitting  a 
suite  of  standardized  tests,  the  ACVC,  as  inputs  to  an  Ada  compiler  and 
evaluating  the  results.  The  purpose  of  validating  is  to  ensure  conformity 
of  the  compiler  to  the  Ada  Standard  by  testing  that  the  compiler  properly 
implements  legal  language  constructs  and  that  it  identifies  and  rejects 
illegal  language  constructs.  The  testing  also  identifies  behavior  that  is 
implementation  dependent  but  permitted  by  the  Ada  Standard.  Six  classes  of 
te3ts  are  used.  These  tests  are  designed  to  perform  checks  at  compile 
time,  at  link  time,  and  during  execution. 
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1.1  PURPOSF  OF  THIS  VALIDATION  SUMMARY  RFPORT 

This  VSR  documents  the  results  of  the  validation  testing  performed  on  an 
Ada  compiler.  Testing  was  carried  out  for  the  following  purposes: 

.  To  attempt  to  identify  any  language  constructs  supported  by  the 
compiler  that  do  not  conform  to  the  Ada  Standard 

.  To  attempt  to  Identify  any  unsupported  language  constructs 
required  by  the  Ada  Standard 

.  To  determine  that  the  implementation-dependent  behavior  is  allowed 
by  the  Ada  Standard 


Testing  of  this  compiler  was  conducted  by  SofTech,  Inc.,  under  the 
direction  of  the  AVF  according  to  policies  and  procedures  established  by 
the  Ada  Validation  Organization  (AVO).  On-site  testing  was  conducted  from 
12  APR  87  through  16  APR  87  at  San  Jose  CA. 


1 .2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the  AVO  may 
make  full  and  free  public  disclosure  of  this  report.  In  the  United  States, 
this  is  provided  in  accordance  with  the  "Freedom  of  Information  Act"  (5 
U.S.C.  #55 2).  The  results  of  this  validation  apply  only  to  the  computers, 
operating  systems,  and  compiler  versions  identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this  report  do  not 
represent  or  warrant  that  all  statements  set  forth  in  this  report  are 
accurate  and  complete,  or  that  the  subject  compiler  has  no  nonconformities 
to  the  Ada  Standard  other  than  those  presented.  Copies  of  this  report  are 
available  to  the  public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D— 139  (Fern  Street) 

Washington  DC  20301-3081 


or  from: 


Ada  Validation  Facility 
ASD/SCOL 

Wright-Patterson  AFB  OH  45433-6503 
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Questions  regarding  this  report  or  the  validation  test  results  should  be 
directed  to  the  AVF  listed  above  or  to: 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
Alexandria  VA  22311 


1.3  REFERENCES 


1.  Reference  Manual  for  the  Ada  Programming  Language, 

ANSI/MIL- STD- 1 8 1 5A ,  February  1983. 

2.  Ada  Validation  Organization :  Procedures  and  Guidelines ,  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers '  Guide,  SofTech, 
Inc.,  December  1984. 


1.4  DEFINITION  OF  TERMS 


ACVC  The  Ada  Compiler  Validation  Capability.  A  set  of  programs 

that  evaluates  the  conformity  of  a  compiler  to  the  Ada 
language  specification,  ANSI/MIL-STD-1815A. 

Ada  Standard  ANSI/MIL-STD-1815A,  February  1983. 

Applicant  The  agency  requesting  validation. 

AVF  The  Ada  Validation  Facility.  In  the  context  of  this  report, 

the  AVF  is  responsible  for  conducting  compiler  validations 
according  to  established  policies  and  procedures. 

AVO  The  Ada  Validation  Organization.  In  the  context  of  this 

report,  the  AVO  is  responsible  for  setting  procedures  for 
compiler  validations. 

Compiler  A  processor  for  the  Ada  language.  In  the  context  of  this 

report,  a  compiler  is  any  language  processor,  including 
cross-compilers,  translators,  and  interpreters. 

Failed  test  A  test  for  which  the  compiler  generates  a  result  that 
demonstrates  nonconformity  to  the  Ada  Standard. 

Host  The  computer  on  which  the  compiler  resides. 
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Inapplicable  A  best  that  uses  features  of  the  language  that  a  compiler  is 
test  not  required  to  support  or  may  legitimately  support  in  a  way 

other  than  the  one  expected  by  the  test. 

Passed  test  A  test  for  which  a  compiler  generates  the  expected  result. 


Target 

Test 


Withdrawn 

test 


The  computer  for  which  a  compiler  generates  code. 

A  program  that  checks  a  compiler's  conformity  regarding  a 
particular  feature  or  features  to  the  Ada  Standard.  In  the 
context  of  this  report,  the  term  is  used  to  designate  a 
single  test,  which  may  comprise  one  or  more  files. 

A  test  found  to  be  incorrect  and  not  used  to  check  conformity 
to  the  Ada  language  specification.  A  test  may  be  incorrect 
because  it  has  an  invalid  test  objective,  fails  to  meet  its 
test  objective,  or  contains  illegal  or  erroneous  use  of  the 
language . 


1.5  ACVC  TEST  CUSSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  The  ACVC 
contains  both  legal  and  illegal  Ada  programs  structured  into  six  test 
classes:  A,  B,  C,  D,  E,  and  I..  The  first  letter  of  a  test  name  identifies 
the  class  to  which  it  belongs.  Class  A,  C,  D,  and  E  tests  are  executable, 
and  special  program  units  are  used  to  report  their  results  during 
execution.  Class  3  tests  are  expected  to  produce  compilation  errors. 
Class  L  tests  are  expected  to  produce  link  errors. 

Class  A  tests  check  that  legal  Ada  programs  can  be  successfully  compiled 
and  executed.  However,  no  checks  are  performed  during  execution  to  see  if 
the  test  objective  has  been  met.  For  example,  a  Class  A  test  checks  that 
reserved  words  of  another  language  (other  than  t..ose  already  reserved  in 
the  Ada  language)  are  not  treated  as  reserved  words  by  an  Ada  compiler.  A 
Class  A  test  is  passed  if  no  errors  are  detected  at  compile  time  and  the 
program  executes  to  produce  a  PASSED  message. 

Class  B  tests  check  that  a  compiler  detects  illegal  language  usage.  Class 
3  tests  are  not  executable.  Each  test  in  this  class  is  compiled  and  the 
resulting  compilation  listing  is  examined  to  verify  that  every  syntax  or 
semantic  error  in  the  test  is  detected.  A  Class  3  test  is  passed  if  every 
illegal  construct  that  it  contains  is  detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly  compiled  and 
executed.  Each  Class  C  test  is  self-checking  and  produces  a  PASSED, 
FAILED,  or  NOT  APPLICABLE  message  indicating  the  result  when  it  is 
executed . 

Class  D  tests  check  the  compilation  and  execution  capacities  of  a  compiler. 
Since  there  are  no  capacity  requirements  placed  on  a  compiler  by  the  Ada 
Standard  for  some  parameters — for  example,  the  number  of  identifiers 


permitted  in  a  compilation  or  the  number  of  units  in  a  library — a  compiler 
may  refuse  to  co:_rile  a  Class  D  test  and  still  be  a  conforming  compiler. 
Therefore,  if  a  Class  D  test  fails  to  compile  because  the  capacity  of  the 
compiler  is  exceeded,  the  test  is  classified  as  inapplicable.  If  a  Class  D 
test  compiles  successfully,  it  is  self-checking  and  produces  a  PASSED  or 
FAILED  message  during  execution. 

Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE,  PASSED, 
or  FAILED  message  when  it  is  compiled  and  executed.  However,  the  Ada 
Standard  permits  an  implementation  to  reject  programs  containing  some 
features  addressed  by  Class  E  tests  during  compilation.  Therefore,  a  Class 
E  test  is  passed  by  a  compiler  if  it  is  compiled  successfully  and  executes 
to  produce  a  PASSED  message,  or  if  it  is  rejected  by  the  compiler  f or  an 
allowable  reason. 

Class  I.  tests  check  that  incomplete  or  illegal  Ada  programs  involving 
multiple,  separately  compiled  units  are  detected  and  not  allowed  to 
execute.  Class  L  tests  are  compiled  separately  and  execution  is  attempted. 
A  Class  L  test  passes  if  it  is  rejected  at  link  time — that  is,  an  attempt 
to  execute  the  main  program  must  generate  an  error  message  before  any 
declarations  in  the  main  program  or  any  units  referenced  by  the  main 
program  are  elaborated. 

Two  library  units,  the  package  REPORT  and  the  procedure  CHECK_FILE,  support 
the  self-checking  features  of  the  executable  tests.  The  package  REPORT 
provides  the  mechanism  by  which  executable  tests  report  PASSED,  FAILED,  or 
NOT  APPLICABLE  results.  It  also  provides  a  set  of  identity  functions  used 
to  defeat  some  compiler  optimizations  allowed  by  the  Ada  Standard  that 
would  circumvent  a  test  objective.  The  procedure  CHECK_FILE  is  used  to 
check  the  contents  of  text  files  written  by  some  of  the  Class  C  tests  for 
chapter  14  of  the  Ada  Standard.  The  operation  of  these  units  is  checked  by 
a  set  of  executable  tests.  These  tests  produce  messages  that  are  examined 
to  verify  that  the  units  are  operating  correctly.  If  these  units  are  not 
operating  correctly,  then  the  validation  is  not  attempted. 

The  text  of  the  tests  in  the  ACVC  follow  conventions  that  are  intended  to 
ensure  that  the  tests  are  reasonably  portable  without  modification.  For 
example,  the  tests  make  use  of  only  the  basic  set  of  55  characters,  contain 
lines  with  a  maximum  length  of  7£  characters,  use  small  numeric  values,  and 
place  features  that  may  not  be  supported  by  all  implementations  in  separate 
tests.  However,  some  tests  contain  values  that  require  the  test  to  be 
customized  according  to  implementation-specific  values — for  example,  an 
illegal  file  name.  A  list  of  the  values  used  for  this  validation  is 
provided  in  Appendix  C. 

A  compiler  must  correctly  process  each  of  the  tests  in  the  suite  and 
demonstrate  conformity  to  the  Ada  Standard  by  either  meeting  the  pass 
criteria  given  for  the  test  or  by  showing  that  the  test  is  inapplicable  to 
the  implementation.  Any  test  that  was  determined  to  contain  an  illegal 
language  construct  or  an  erroneous  language  construct  is  withdrawn  from  the 
ACVC  and,  therefore,  is  not  used  in  testing  a  compiler.  The  tests 
withdrawn  at  the  time  of  validation  are  given  in  Appendix  D. 
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CHAPTER  2 


CONFIGURATION  INFORMATION 


2.1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested  under  the 
following  configuration: 


Compiler:  Tolerant  Ada  Development  System 
(part  number  S-240),  Version  2.0 

ACVC  Version:  1.8 

Certificate  Expiration  Date:  11  May  1988 


Host  Computer: 


Machine : 


Operating  System: 


Memory  Size: 


Target  Computer: 


Machine : 


Operating  System: 


Memory  Size: 


Tolerant  Eternity 
TX 

Release  5.2 
12  megabytes 


Tolerant  Eternity 
TX 

Release  5.2 
12  megabytes 


2-1 


CONFIGURATION  INFORMATION 


2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the  behavior  of 
a  compiler  in  those  areas  of  the  Ada  Standard  that  permit  implementations 
to  differ.  Class  D  and  E  tests  specifically  check  for  such  implementation 
differences.  However,  tests  in  other  classes  also  characterize  an 

implementation.  This  compiler  is  characterized  by  the  following 
interpretations  of  the  Ada  Standard: 


Capacities . 

The  compiler  correctly  processes  tests  containing  loop  statements 
nested  to  65  levels,  block  statements  nested  to  65  levels,  and 
recursive  procedures  separately  compiled  as  subunits  nested  to  17 
levels.  It  correctly  processes  a  compilation  containing  723 
variables  in  the  same  declarative  part.  (See  tests  D55A03A. .H  (8 
tests),  D56001B,  D64005E..G  (3  tests),  and  D29002K.) 


.  Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM. MAX_INT.  This 
implementation  does  not  reject  such  calculations  and  processes 
them  correctly.  (See  tests  D4A002A,  D4A002B,  D4A004A,  and 

D4A004B. ) 


.  Predefined  types. 

This  implementation  supports  the  additional  predefined  types 
SHORT_INTEGER,  SHORT_FLCAT,  and  TINY_INTEGER  in  the  package 
STANDARD.  (See  tests  386001C  and  B86001D.) 


Based  literals. 

An  implementation  is  allowed  to  reject  a  based  literal  with  a 
value  exceeding  SYSTEM .MAX_INT  during  compilation ,  or  it  may  raise 
NUMERIC_ERROR  or  CONSTRAINT_ERROR  during  execution.  This 
implementation  raises  NUMERIC_ERROR  during  execution.  (See  test 
E24101A.) 


.  Array  types. 

An  implementation  is  allowed  to  raise  NUMERIC_FRROR  or 
CONSTRAINT_ERROR  for  an  array  having  a  'LENGTH  tha^  exceeds 
STANDARD. INTEGER' LAST  and/or  SYSTEM. MAX  INT. 
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A  packed  BOOLEAN  array  having  a  'LENGTH  exceeding  INTEGER ’!. AST 
raises  N'JMERIC_ERRGR  when  tne  array  type  is  declared.  (See  test 
C52103X.) 

A  packed  two-dimensional  BOOLEAN  array  with  more  than  INTEGER' LAST 
components  raises  NUMERIC_ERROR  when  the  array  subtype  is 
declared.  (See  test  C52104Y.) 

A  null  array  with  one  dimension  of  length  greater  than 
INTEGER 'LAST  may  raise  NUMERIC_ERROR  or  CONST RA IN T_ERR0R  either 
when  declared  or  assigned.  Alternatively,  an  implementation  may 
accept  the  declaration.  However,  lengths  must  match  in  array 
slice  assignments.  Tnis  implementation  raises  NUMERIC_ERROR  when 
the  array  type  is  declared.  (See  test  E52103T.) 

In  assigning  one-dimens ior.al  array  types,  the  expression  appears 
to  be  evaluated  in  its  entirety  before  CONST RA IN T_ERROR  is  raised 
when  checking  whether  the  expression's  subtype  is  compatible  with 
the  target's  subtype.  In  assigning  two-dimensional  array  types, 
the  expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's  subtype. 
(See  test  C52013A.) 


Discriminated  types. 

During  compilation,  an  implementation  is  allowed  to  either  accept 
or  reject  an  incomplete  type  with  discriminants  that  is  used  in  an 
access  type  definition  with  a  compatible  discriminant  constraint. 
This  implementation  accepts  such  subtype  indications  during 
compilation.  (See  test  E38104A.) 

In  assigning  record  types  with  discriminants,  the  expression 
appears  to  be  evaluated  in  its  entirety  before  CONST RAINT_ERROR  is 
raised  when  checking  whether  the  expression's  subtype  is 
compatible  with  the  target's  subtype.  (See  test  C52013A.) 


Aggregates . 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all  choices 
appear  zo  be  evaluated  before  checking  against  the  index  type. 
(See  tests  C43207A  and  C43207B.) 

In  the  evaluation  of  an  aggregate  containing  subaggregates,  all 
choices  are  evaluated  before  being  checked  for  identical  bounds. 
(See  test  E43212B.) 

All  choices  are  evaluated  before  CONSTRAINT_ERROR  is  raised  if  a 
bound  in  a  nonnull  range  of  a  nonnull  aggregate  does  not  belong  to 
an  index  subtype.  (See  test  E43211B.) 
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.  Functions. 

An  implementation  may  allow  the  declaration  of  a  parameterless 
function  and  an  enumeration  literal  having  the  same  profile  in  the 
same  immediate  scope,  or  it  may  reject  the  function  declaration. 
If  it  accepts  the  function  declaration,  the  use  of  the  enumeration 
literal's  identifier  denotes  the  function.  This  implementation 
rejects  the  declaration.  (See  test  E66001D.) 


Representation  clauses. 

The  Ada  Standard  does  not  require  an  implementation  to  support 
representation  clauses.  If  a  representation  clause  is  not 
supported,  then  the  implementation  must  reject  it.  While  the 
operation  of  representation  clauses  is  not  checked  by  Version  1.8 
of  the  ACVC,  they  are  used  in  testing  other  language  features. 
This  implementation  accepts  'SIZE  and  'STORAGE_SIZE  for  tasks, 

' STORAGE_SIZE  for  collections,  and  'SMALL  clauses.  Enumeration 
representation  clauses,  including  those  that  specify  noncontiguous 
values,  appear  to  be  supported.  (See  tests  C55B16A,  C87B62A, 

C87B62B,  C87B62C,  and  BC1002A.) 


.  Pragmas . 

The  pragma  INLINE  Is  supported  for  procedures  and  functions.  (See 
tests  CA3004E  and  CA3004F.) 


.  Input/output. 

The  package  SEQUENTIAL_IO  can  be  instantiated  with  unconstrained 
array  types  and  record  types  with  discriminants.  The  package 
DIRECT_IO  can  be  instantiated  with  unconstrained  array  types  and 
record  types  with  discriminants  without  defaults.  (See  tests 
AE2101C,  AE2101H,  CE2201D,  CE2201E,  and  CE2401D.) 

An  existing  text  file  can  be  opened  In  0UT_FTLE  mode,  can  be 
created  in  OUT_FILE  mode,  and  can  be  created  In  IN_FILE  mode. 
(See  test  EE3102C.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  text  I/O  for  both  reading  and  writing  (See  tests 
CF.3111A..E  (5  tests).) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  sequential  I/O  for  both  reading  and  writing  (See  tests 
CE2107A..F  (6  tests).) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  direct  I/O  for  both  reading  and  writing  (See  tests 
CE2107A..F  (6  tests).) 


CONFIGURATION  INFORMATION 


An  external  file  associated  with  more  than  one  internal  file  can 
be  deleted.  (See  test  CE21103.)} 

Temporary  sequential  files  are  given  a  name.  Temporary  direct 
files  are  given  a  name.  Temporary  files  given  names  are  deleted 
when  they  are  closed.  (See  tests  CE2108A  and  CE21Q8C.) 

Generics . 

Generic  subprogram  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  test  CA2009F.) 

Generic  package  declarations  and  bodies  can  be  compiled  in 

separate  compilations .  (See  tests  CA2Q09C  and  BC3205D.) 
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3.1  TEST  RESULTS 

Version  1.8  of  the  ACVC  contains  2399  tests.  When  validation  testing  of 
Tolerant  Ada  Development  System  (part  number  S-240)  was  performed,  19  tests 
had  been  withdrawn.  The  remaining  2380  tests  were  potentially  applicable 
to  this  validation.  The  AVF  determined  that  178  tests  were  inapplicable  to 
this  implementation,  and  that  the  2202  applicable  tests  were  passed  by  the 
implementation. 

The  AVF  concludes  that  the  testing  results  demonstrate  acceptable 
conformity  to  the  Ada  Standard. 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT 

A 

B 

TEST 

n 

O 

CLASS 

D 

F 

L 

TOTAL 

Passed 

69 

865 

1192 

17 

13 

46 

2202 

Failed 

0 

0 

0 

0 

0 

0 

0 

Inapplicable 

0 

2 

176 

0 

0 

0 

178 

Withdrawn 

0 

7 

12 

0 

0 

0 

19 

TOTAL 

69 

874 

1380 

17 

13 

46 

2399 
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3.3  SUMMARY  OF  TEST  RESULTS  BY  CHAPTER 


RESULT 

2 

3 

4 

5 

6 

CHAPTER 

7  8  9 

10 

1 1 

12 

14 

TOTAL 

Passed 

102 

252 

334 

244 

161 

97 

138 

261 

130 

32 

218 

233 

2202 

Failed 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Inapplicable 

14 

73 

86 

3 

0 

0 

1 

1 

0 

0 

0 

0 

178 

Withdrawn 

0 

5 

5 

0 

0 

1 

1 

2 

4 

0 

1 

0 

19 

TOTAL 

116 

330 

425 

247 

161 

98 

140 

264 

134 

32 

219 

233 

2399 

3.4  WITHDRAWN  TESTS 

The  following  19  teats  were  withdrawn  from  ACVC  Version  1.8  at  the  time  of 
this  validation: 


C321 14A 
B33203C 
C34018A 
C35904A 
B37401A 


C41404A 

B45116A 

C48008A 

B49006A 

B4A010C 


B74101B 

C87B50A 

C92005A 

C940ACA 

CA3005A..D  (4  tests) 
BC3204C 


See  Appendix  D  for  the  reason  that  each  of 


these  tests  was  withdrawn. 


3.5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of  features 
hat  a  compiler  is  not  required  by  the  Ada  Standard  to  support.  Others  may 
epend  on  the  result  of  another  test  that  is  either  inapplicable  or 
withdrawn.  For  this  validation  attempt,  178  tests  were  inapplicaole  for 
the  reasons  indicated: 

.  C34001E,  552004D,  B55B09C,  and  C55B07A  use  LONGJENTEGER  which  is 

not  supported  by  this  compiler. 

.  C340Q1G  and  C35702B  use  LONG_FLOAT  which  is  not  supported  by  this 

compiler. 

.  C86001F  redefines  package  SYSTEM,  but  TF.XT_I0  is  made  obsolete  by 

this  new  definition  in  this  implementation  and  the  test  cannot  be 
executed  since  the  package  REPORT  is  dependent  on  the  package 
TEXT  10. 
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.  C96005B  checks  implementations  for  which  the  smallest  and  largest 

values  in  type  DURATION  are  different  from  the  smallest  and 
largest  values  in  DURATION'S  base  type.  This  is  not  the  case  for 
this  implementation. 


.  The  following  170  tests  require  a  floating-point  accuracy  that 
exceeds  the  maximum  of  1 5  supported  by  the  implementation: 


C24113L..Y 
C35705L..Y 
C35706L..Y 
C 357 07 L. .Y 
C35708I...Y 
C35802L. .Y 
C45241L..Y 
C45321L. .Y 
C45421L..Y 
C45424L..Y 
C45521L..Z 
C45621L..Z 


(14 

tests) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(14 

tests ) 

(15 

test  s ) 

(15 

tests ) 

3.6  SPLIT  TESTS 

If  one  or  more  errors  do  not  appear  to  have  been  detected  in  a  Class  B  test 
because  of  compiler  error  recovery,  then  the  test  is  split  into  a  set  of 
smaller  tests  that  contain  the  undetected  errors.  These  splits  are  then 
compiled  and  examined.  The  splitting  process  continues  until  ail  errors 
are  detected  by  the  compiler  or  until  there  is  exactly  one  error  per  split. 
Any  Class  A,  Class  C,  or  Class  E  test  that  cannot  be  compiled  and  executed 
oecause  of  its  size  is  split  into  a  set  of  smaller  subtests  that  can  be 
proc  eased . 

Splits  were  required  for  19  Class  B  tests. 


324204A 

B37201A 

B67001B 

324 204 B 

B38008A 

56 7 00 1C 

B24204C 

341202A 

B67001D 

32A003A 

34400 1 A 

3910033 

32A003B 

364001 A 

3C7001A 

32A003C 

E33301A 

36  7  00 1 A 

397102A 
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3.7  ADDITIONAL  TESTING  INFORMATION 

3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  ".3  produced  by 
the  Tolerant  Ada  Development  System  was  submitte_  to  the  AVF  by  the 
applicant  for  review.  Analysis  of  these  results  demonstrated  that  the 
compiler  successfully  passed  all  applicable  tests,  and  that  the  compiler 
exhibited  the  expected  behavior  on  all  inapplicable  tests. 


3.7.2  Test  Method 

Testing  of  the  Tolerant  Ada  Development  System  using  ACVC  Version  1.8  was 
conducted  on-site  by  a  validation  team  from  the  AVF.  The  configuration 
consisted  of  a  Tolerant  Eternity  operating  under  TX,  Release  3.2. 

A  magnetic  tape  containing  all  tests  except  for  withdrawn  tests  and  tests 
requiring  unsupported  floating-point  precisions  was  taken  on-site  by  the 
validation  team  for  processing.  Tests  that  make  use  of 
implementation-specific  values  were  customized  before  being  written  to  the 
magnetic  tape.  Tests  requiring  splits  during  the  prevalidation  testing 
were  included  in  their  split  form  on  the  magnetic  tape. 

The  contents  of  the  magnetic  tape  were  loaded  directly  onto  the  host 
computer.  After  the  test  files  were  loaded  to  disk,  the  full  set  of  tests 
was  compiled  and  linked  on  the  Tolerant  Eternity.  All  executable  tests 
were  run  on  the  Tolerant  Eternity.  Results  were  routed  via  an  Ethernet 
network  to  a  VAX  11/780  and  printed  from  the  VAX. 

The  compiler  was  tested  using  command  scripts  provided  by  Tolerant  Systems 
and  reviewed  by  the  validation  team. 

Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using  a  single 
host  and  target  computer.  Test  output,  compilation  listings,  and  job  logs 
were  captured  on  magnetic  tape  and  archived  at  the  AVF.  The  listings 
examined  on-site  by  the  validation  team  were  also  archived. 


3.7.3  Test  Site 

The  validation  team  arrived  at  San  Jose  CA  on  12  APR  87,  and  departed  after 
testing  was  completed  on  16  APR  87. 
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APPENDIX  A 


DECLARATION  OF  CONFORMANCE 


Tolerant  Systems  has  submitted  the  following 
declaration  of  conformance  concerning  the  Tolerant  Ada 
Development  System  (part  number  S-240). 


DECLARATION  OF  CONFORMANCE 


k 

fa 

fa 
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APPENDIX  F  OF  THE  Ada  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to  implementation- 
dependent  pragmas,  to  certain  machine-dependent  conventions  as  mentioned  in 
chapter  13  of  MIL-STD- 181 5A,  and  to  certain  allowed  restrictions  on 
representation  clauses.  The  implementation-dependent  characteristics  of 
the  Tolerant  Ada  Development  System  (part  number  S-240),  Version  2.0,  are 
described  in  the  following  sections  which  discuss  topics  in  Appendix  F  of 
the  Ada  Language  Reference  Manual  ( ANSI/MIL-STD- 181 5A) . 
Implementation-specific  portions  of  the  package  STANDARD  are  also  included 
in  this  appendix. 

package  STANDARD  is 


type  INTEGER  is  range  -2 _147_483_648  ..  2_147_483_647 ; 
type  SHORT_INTEGER  is  range  -32_768  ..  32_76 7 ; 
type  TINY_INTEGER  is  range  -128  ..  12 7; 

type  FLOAT  is  digits  15  range 

-2*1 . 1 1  1 1 1 1 1 1 1 1_1 1 1 1 1 1 1 1 1 1_!  1 1 1 1 11 1 11_n  11 1 11 1 1 1_1 1 1 1 1 1 11 1 1_1 1  #E1 023 
. .  2*1 .111111111 1 _ 1 11111111 1_1 11111111 1_1 11111111 1_1 11111111 1_1 1#E1023 

type  SHQRT_FL0AT  is  digits  6  range 

-2*1 . 1 1 1 1 1_1 1 1 1 1_1 1 1 1 1_1 1 1 1 1_1 1 1#E1 27 
. .  2*1 . 1 1 1 1 1_11 1 1 1_1 1 1 1 1_1 1 1 1 1_1 1 1 #E1 27 ; 

type  DURATION  is  delta  2#1.0#E-14  range 
-2*100000000000000000.0#  .. 

2*11111111111111111.11111111111111#  ; 


end  STANDARD; 
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Attachment  II:  Appendix  F  Criteria 


1.  Implementation-dependent  Pragmas 

Tolerant  ADS  provides  for  sharing  of  generic  bodies 
(procedures  and  packages),  when  the  generic  parameters  are 
restricted  to  enumeration  types,  integer  types,  and  floating 
types . 

PRAGMA  SHARE_BODY  is  used  to  indicate  desire  to  share  or  not 
share  an  instantiation.  The  pragma  may  reference  the  generic  unit 
or  the  instantiated  unit.  When  it  references  a  generic  unit,  it 
sets  sharing  on/off  for  all  instantiations  of  that  generic,  unless 
overridden  by  specific  SHARE_BODY  pragmas  for  individual 
instantiations.  When  it  references  an  instantiated  unit,  sharing 
is  on/off  only  for  that  unit.  The  default  is  to  share  all  generics 
that  can  be  shared,  unless  the  unit  uses  PRAGMA  IN_LINE. 

PRAGMA  SHARE_BODY  is  only  allowed  in  the  following  places: 
immediately  within  a  declarative  part,  immediately  within  a 
package  specification,  or  after  a  library  unit  in  a  compilation, 
but  before  any  subsequent  compilation  unit.  The  form  of  this 
pragma  is 

pragma  SHARE_BODY  (generic_name,  boolean_literal ) 

Note  that  a  parent  instantiation  is  independent  of  any  individual 
instantiation,  therefore  recompilation  of  a  generic  with  different 
parameters  has  no  effect  on  other  compilations  that  reference  it. 
The  unit  that  caused  compilation  of  a  parent  instantiation  need 
not  be  referenced  in  any  way  by  subsequent  units  that  share  the 
parent  instantiation. 

Sharing  generics  causes  a  slight  execution  time  penalty  because 
all  type  attributes  must  be  indirectly  referenced  (as  if  an  extra 
calling  argument  were  added).  However,  it  substantially  reduces 
compilation  time  in  most  circumstances  and  reduces  program  size. 

Tolerant  has  compiled  a  unit,  SHARED_IO,  in  the  standard  library 
that  instantiates  all  Ada  generic  I/O  packages.  Thus,  any 
instantiation  of  an  Ada  I/O  generic  package  will  share  one  of  the 
parent  instantiation  generic  bodies.  The  PRAGMA  SHARE_BODY  takes 
the  name  of  a  generic  instantiation  or  a  generic  unit  as  the  first 
argument  and  one  of  the  identifiers  TRUE  or  FALSE  as  the  second 
argument.  This  pragma  is  only  allowed  immediately  at  the  place  of 
a  declarative  item  in  a  declarative  part  or  package  specification, 
or  after  a  library  unit  in  a  compilation,  but  before  any  subsequent 
compilation  unit. 

When  the  first  argument  is  a  generic  unit,  the  pragma  applies  to 
all  instantiations  of  that  generic.  When  the  first  argument  is  the 
name  of  a  generic  instantiation  the  pragma  applies  only  to  the 
specified  instantiation,  or  overloaded  instantiation. 

If  the  second  argument  is  TRUE,  the  compiler  will  try  to  share  code 


S3 


generated  for  a  generic  instant iat ion  with  code  generated  for  other 
instantiations  of  the  same  generic.  When  the  second  argument  is 
FALSE,  each  instantiation  will  get  a  unique  copy  cf  the  generated 
code.  The  extent  to  which  code  is  shared  between  instantiations 
depends  on  this  pragma  and  the  kind  of  generic  formal  parameters 
declared  for  the  generic  unit. 

PRAGMA  EXTERNAL_NAME  allows  variables  defined  in  another  language 
to  be  referenced  directly  in  Ada.  PRAGMA  EXTERNAL_NAME  will  replace 
all  occurrences  of  var iable_name  with  an  external  reference  to 
link_name  in  the  object  file  using  the  format  shown  below. 

pragma  EXTERNAL_NAME  ( var iable_name ,  link_name); 

This  pragma  is  allowed  at  the  place  of  a  declarative  item  in  a 
package  specification  and  must  apply  to  an  object  declared  earlier 
in  the  same  package  specif ication .  The  object  must  be  declared  as 
a  scalar  or  an  access  type.  The  object  cannot  be  any  of  the  following 

a  loop  variable, 
a  constant, 

an  initialized  variable, 
an  array,  or 
a  record. 


The  link_name  must  be  constructed  as  expected  by  the  linker  ld(l). 
For  example,  if  linking  with  a  C  program  on  UNIX,  the  C  variable 
name  preceded  by  an  underscore  must  be  used  in  the  same  case  (upper 
and  lower)  as  in  the  C  program  source  file,  i.e.,  to  link  to  the  C 
global  variable  errno. 

package  PACKAGE_NAME  is 
•  •  • 

ERRNO: INTEGER; 

pragma  EXTERNAL_NAME ( ERRNO , "_errno" ) ; 

•  •  • 

end  PACKAGE  NAME; 


2.  Implementation  of  Predefined  Pragmas 

Recognized,  but  have  no  effect:  CONTROLLED,  OPTIMIZE,  SHARED, 
MEMOR Y_S I Z E ,  STORAGE_UNIT ,  SYSTEM_NAME. 

Implemented  as  described  by  Appendix  B  of  the  Ada  Reference 
Manual:  ELABORATE,  INLINE,  LIST,  PAGE,  PRIORITY. 

PRAGMA  INTERFACE  supports  calls  to  'C'  and  FORTRAN.  Type  of 
parameters  and  result  must  be  scalar,  access  or  the  predefined 
type  ADDRESS  in  SYSTEM.  All  parameters  must  have  mode  IN. 

PRAGMA  PACK  will  cause  the  compiler  to  choose  a  non-aligned 
representation  for  composite  types.  Bit  level  packing  is  not 
supported . 

PRAGfiA  SUPPRESS  is  implemented  as  described  in  the  Ada 
Reference  Manual,  except  that  DIVISION_CHECK  cannot  be 
suppressed. 
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3.  Implementation-dependent  Attributes 

There  are  no  implementation-dependent  attributes  in  Tolerant  ADS. 

4.  Restrictions  on  Representation  Clauses 

4.1.  PRAGMA  PACK 

Bit  packing  is  not  supported.  Objects  and  components  are  packed 
to  the  nearest  whole  STORAGE_UNIT . 

4.2.  Size  Specif ication 

The  size  specif ication  T' SMALL  is  supported  only  to  the 
extent  that  the  base  representation  is  not  changed. 

T ' SIZE  and  T ' STORAGE_S I Z E  are  supported. 

4.3.  Record  Representation  Clauses 

Component  clauses  must  be  aligned  on  STORAGE_UNIT  boundaries. 

4.4.  Address  Clauses 

Address  clauses  are  not  supported. 

4.5  Interrupts 

Interrupts  are  supported.  They  are  attached  to  the  UNIX 
signal  mechanism. 

4.6  Change  of  Representation 

Change  of  representation  is  not  supported  for  record  types. 

4.7  Representation  Attributes 

The  ADDRESS  attribute  is  not  supported  for  the  following  entities 
static  constants  packages  tasks  labels  entries. 

4.8.  Machine  Code  Insertions 

Machine  code  insertions  are  supported. 

5.  Conventions  for  Implementation-generated  Names 
There  are  no  implementation  generated  names. 


6.  Interpretation  of  Expressions  in  Address  Clauses 
Address  clauses  are  not  supported. 


7.  Restrictions  on  Unchecked  Conversions 

The  predefined  generic  function  UNCHECKED_CONVERSION  cannot  be 
instantiated  with  a  target  type  that  is  an  unconstrained  array 
type  or  an  unconstrained  record  type  with  discriminants. 

8.  Implementation  Character istics  of  I/O  Packages 

Instantiations  of  DIRECT_IO  use  the  value  MAX_REC_SIZE  as  the 
record  size  (expressed  in  STORAGE_UNITs )  when  the  size  of 
ELEMENT_TYPE  exceeds  that  value.  For  example,  for  unconstrained 
arrays  such  as  string  where  ELEMENT_TYPE ' SIZE  is  very  large, 
MAX_REC_S I ZE  is  used  instead.  MAX_RECORD_SIZE  is  defined  in 
SYSTEM  and  can  be  changed  by  a  program  before  instantiating 
DIRECT__IO  to  provide  an  upper  limit  on  the  record  size. 

In  any  case,  the  maximum  size  supported  is  1024  *  1024  * 

S TORAG E_UN I T  bits.  DIRECT_IO  will  raise  USE_ERROR  if 
MAX_REC_S I ZE  exceeds  this  absolute  limit. 

Instantiations  of  SEQrJENTIAL_IO  use  the  value  MAX_REC_SIZE  as 
the  record  size  (expressed  in  STORAGE_UNITs )  when  the  size  of 
ELEMENT_TYPE  exceeds  that  value.  For  example,  for  unconstrained 
arrays  such  as  string  where  ELEMENT_TYPE ’ SIZE  is  very  large, 
MAX_REC_S I Z E  is  used  instead.  MAX_RECORD_SIZE  is  defined  in 
SYSTEM  and  can  be  changed  by  a  program  before  instantiating 
INTEGER_IO  to  provide  an  upper  limit  on  the  record  size. 
SEQUENTIAL_IO  imposes  no  limit  on  MAX_REC_SIZE. 

The  FORM  parameter  to  TEXT_IO  CREATE  and  OPEN  has  been 
implemented  to  provide  access  to  additional  file 
characteristics  supported  by  the  TX  operating  system. 


9.  Implementation  Limits 

The  following  limits  are  actually  enforced  by  the  implementation. 

It  is  not  intended  to  imply  that  resources  up  to  or  even  near 
these  limits  are  available  to  every  program. 

9.1  Line  Length 

The  implementation  supports  a  maximum  line  length  of  500  characters 
including  the  end  of  line  character. 

9.2  Record  and  Array  Sizes 

The  maximum  size  of  a  statically  sized  array  type  is  4,000,000  x 
STORAGE_UNITS .  The  maximum  size  of  a  statically  sized  record 
type  is  4,000,000  x  STORAGE_UNITS .  A  record  type  or  array  type 
declaration  that  exceeds  these  limits  will  generate  a  warning 
message . 
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9.3  Default  Stack  Size  for  Tasks 


In  the  absence  of  an  explicit  STORAG£_SIZE  length  specification 
every  task  except  the  main  program  is~allocated  a  fixed  size 
stack  of  10/240  STORAGE_UNITS .  This  is  the  value  returned  by 
T ' STORAGE_SIZE  for  a  task  type  T. 

9.4  Default  Collection  Size 

In  the  absence  of  an  explicit  STORAGE_SIZ£  length  attribute  the 
default  collection  size  for  an  access  type  is  100,000 
STORAGE_UNITS.  This  is  the  value  returned  by  T ' STORAGE_S I ZE  for 
an  access  type  T. 

9.5  Limit  on  Declared  Objects 

There  is  an  absolute  limit  of  6,000,000  x  STORAGE_UNITS  for  objects 
declared  statically  within  a  compilation  unit.  If  this  value  is 
exceeded  the  compiler  will  terminate  the  compilation  of  the  unit 
vith  a  FATAL  error  message. 
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Attachment  IV:  Package  System 


package  SYSTEM 
is 


type  NAME  is  (  eternity_tx  ); 


SYSTEM_NAME 

STORAGE_UNIT 
MEMORY  SIZE 


:  constant  NAME  :=  eternity_tx; 

:  constant  :=  8; 

:  constant  :=  16_777_216; 


—  System-Dependent  Named  Numbers 


MIN_INT 

MAX_INT 

MAX_DIGITS 

MAX_MANTISSA 

FINE_DELTA 

TICK 


:  constant  : =  -2_147_483_647  -  1; 
:  constant  :=  2_147_483_647 ; 

:  constant  :  =  15; 

:  constant  :=  31; 

:  constant  :=  2.0**(-14); 

:  constant  ;=  0.01; 


—  Other  System-dependent  Declarations 
subtype  PRIORITY  is  INTEGER  range  0  ..  99; 

MAX_REC_S I Z E  :  integer  :=  64*1024; 
type  ADDRESS  is  private; 

NO_ADDR:  constant  ADDRESS; 

function  PHYSICAL_ADDRESS ( I :  INTEGER)  return  ADDRESS; 

function  ADDR_GT (A,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_LT(A,  B;  ADDRESS)  return  BOOLEAN; 

function  ADDR_GE( A,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_LE ( A ,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_DIFF( A,  B:  ADDRESS)  return  INTEGER; 

function  INCR_ADDR ( A :  ADDRESS;  INCR;  INTEGER)  return  ADDRESS; 

function  DECR_ADDR( A:  ADDRESS;  DECR:  INTEGER)  return  ADDRESS; 


function  ”>"(A, 
function  "<"(A, 
function  ">="(A 
function  "<="(A 
function  "-"(A, 
function  "+M(A: 

renames 
function  "-"(A; 

renames 


B:  ADDRESS)  return  BOOLEAN  renames  ADDR_GT ; 

B:  ADDRESS)  return  BOOLEAN  renames  ADDR_LT; 
r  B;  ADDRESS)  return  BOOLEAN  renames  ADDR_GE; 

,  B;  ADDRESS)  return  BOOLEAN  renames  ADDR_LE; 
B:  ADDRESS)  return  INTEGER  renames  ADDR_DIFF; 
ADDRESS;  INCR:  INTEGER)  return  ADDRESS 
INCR_ADDR; 

ADDRESS;  DECR:  INTEGER)  return  ADDRESS 
DECR  ADDR ; 


pragma  inline ( PHYSICAL_ADDRESS ) ; 
pragma  inline{ ADDR_GT) ; 
pragma  inline! ADDR_LT) ; 
pragma  inline ( ADDR_GE ) ; 
pragma  inline ( ADDR_LE ) ; 
pragma  inline ( ADDR_DIFF) ; 
pragma  inline( INCR_ADDR) ; 
pragma  inline(DECR_ADDR) ; 
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rw<  n*  ryr.r 


private 


type  ADDRESS  is  new  INTEGER- 
no_addr:  constant  address  := 

end  SYSTEM; 


address ( 0 ) 
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APPENDIX  C 


TEST  PARAMETERS 


Certain  tests  in  the  ACVC  make  use  of  implementation-dependent  values,  such 
as  the  maximum  length  of  an  input  line  and  invalid  file  names.  A  test  that 
makes  use  of  such  values  is  identified  by  the  extension  .TST  in  its  file 
name.  Actual  values  to  be  substituted  are  represented  by  names  that  begin 
with  a  dollar  sign.  A  value  must  be  substituted  for  each  of  these  names 
before  the  test  is  run.  The  values  used  for  this  validation  are  given 
below. 


Name  and  Meaninc 


$3IG_ID1 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$3.i.G  xD2 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$BIG_ID3 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  middle  character. 

$3IG_ID4 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  middle  character. 

$d.u  INT  L^T 

An  integer  literal  of  value  298 
with  enough  leading  zeroes  so 
that  it  is  the  size  of  the 
maximum  line  length. 


Value 


(  1  ..498  =>’A' ,499  =>'!') 


( 1  .  .498  =  >  'A ' ,499  =>’2’) 


(1..249  =>  '  A  ' ,  250  =>'3',251  ..499  =>'A’ 


(  1  ..249  =>'A',250  =>’4', 251  ..499  =  >  '  A  ’ 


(1..496  =>’0' ,497. .499  =>"298") 


/•  '•  -V-.-'- 


*  s  V. .*  / 
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ESI  PARAMETERS 


Name  and  Meaning _ 

$5TG  REAL  L7T 

A  real  literal  that  can  be 
either  of  floating-  or  fixed- 
point  type,  has  value  690.0,  and 
has  enough  leading  zeroes  to  be 
the  size  of  tne  maximum  line 
1  en  gt  h . 

$5 LaNES 

A  sequence  of  blanks  twenty 
characters  fewer  than  the  size 
of  the  maximum  line  length. 

$C0UNT_LAST 

A  universal  integer  literal 
whose  value  is  TEXT_I0. COUNT' LAST. 

$EXT  ENDED_ASCI I_CHA  RS 

A  string  literal  containing  all 
the  ASCII  characters  with 

printable  graphics  that  are  not 
in  the  basic  55  Ada  character 
set. 

SFIELD  LAST 

A  universal  Integer  literal 

wnose  value  is  TEXT_I0. FIELD' LAST. 

S  F I L  E_N  A  ME_W  I T  H_B  A  D_C  HA  RS 

An  illegal  external  file  name 
that  either  contains  invalid 
characters,  or  is  too  long  if  no 
invalid  characters  exist. 

5  FI  L  E_N  A  ME_WI  T  H_WI  I.  D_CA  RD_CH  A  R 

An  external  file  name  that 

either  contains  a  wild  card 
character,  or  Is  too  long  if  no 
wild  card  character  exists. 

S  G  R  E  A  T  E  R_T  HA  N_D  U  RA  T 1 0  N 

A  universal  real  value  that  lies 
between  DURATION 'BASE' LAST  and 
DURATION' LAST  if  any,  otherwise 
any  value  in  the  range  of 
DURATION . 

$  GR  EA  TE  R_THAN_DU  R A  TI 0N_B ASE_L  AST 

The  universal  real  value  that  is 
greater  than  DURATION ' BASE ' LAST, 
if  such  a  value  exists. 


V  a  j.  u  e 

=  > '0 ' ,494. . 499  =>"d9.0E1"; 


( 1  - .479  =>'  ') 

2147483647 

"abcdef  ghijklmnopqrstuvwxyz!$J ?£[ \ ] 


21 47483647 

/illegal/file_name/2 { ]$*2102C.DAT 

/ illegal/ f i le_name/CE2 1 02C*. DAT 

100  000.0 


10  000  000.0 


.  r.—  i  r  n.r.r. 


Nan®  and  Meaning 


^ILLEGAL  EXTFR NAL  FILE  NAME1 

An  illegal  external  file  name. 

$tllegal_extfrnai._fii.f_name2 

An  illegal  external  file  name 
tnat  i 3  different  from 

$ :llegal_external_file_name i . 

$  IN  T  FGE  R_FIRS  T 

The  universal  integer  literal 
expression  whose  value  is 
INTEGER' FIRST. 

$INTEGER_LAST 

The  universal  integer  literal 
expression  whose  value  is 
INTEGER 'LAST. 

$  I,  ESS_THAN_DU  RATION 

A  universal  real  value  that  lies 
between  DURATION ' BASE ' FIRST  and 
DURATION 'FIRST  if  any,  otherwise 
any  value  in  the  range  of 
DURATION. 

$LESS_THAN_DURATION_BASE_FIRST 

The  universal  real  value  that  is 
less  than  DURATION 'BASE 'FIRST, 
if  such  a  value  exists. 

$MAX_DIGITS 

The  universal  Integer  literal 
whose  val-e  is  the  maximum 
digits  supported  for 

f loating-point  types. 

$MAX_IN_LEN 

The  universal  Integer  literal 
whose  value  i3  the  maximum 
input  line  length  permitted  by 
the  implementation. 

$MAX_INT 

The  universal  integer  literal 
whose  value  is  SYSTEM.MAX  INT. 


Value 


/no/such/di rectory /IDLE GAL_EXTr  RNA1 


/no/ such/ di rectory/ILLEGAL  F XTERNAI 


-2  147  463  648 


2  147  483  647 


-100  000.0 


-10  000  000.0 


2  147  483  647 


ARnMET  r.no 


jname 

A  name  of  a  predefined  numeric 
type  other  than  FLOAT,  INTEGER, 
SHOBT_FLOAT,  SHORT_INTEGER, 

L0NG_rL0AT,  or  LONG_INTEGER 
if  one  exists ,  otherwise  any 
undefined  name. 

$NEG_3A5F0_INT 

A  based  integer  literal  whose 
highest  order  nonzero  bit 
falls  in  the  sign  bit 


Lon  of  the  representation 


for  SYSTEM.MAX_INT. 

$NON_ASCII_CHA  R_TYPE 

An  enumerated  type 
for  a  character 
literals  are  the 
N0N_N’JLL  and  all 
characters  with 

graphics . 


definition 
type  whose 
identifier 
non-ASCII 
printable 


V  alue 


TINY  INTEGER 


8# 777777777776# 


{NON  NULL) 


v v:-w.v:v 


v;v,v>;  y. 


>V/vv  ,  .•>*•  w  v 


APPENDIX  D 


WITHDRAWN  TESTS 


Some  testa  are  withdrawn  from  the  ACVC  because  they  do  not  conform  to  the 
Ada  Standard.  The  following  19  tests  had  been  withdrawn  at  the  time  of 
validation  testing  for  the  reasons  indicated.  A  reference  of  the  form 
"Al-ddddd"  is  to  an  Ada  Commentary. 


.  C32114A:  An  ur.tenninated  string  literal  occurs  at  line  62. 

.  E33203C:  The  reserved  word  "IS"  is  misspelled  at  line  45. 

.  C34018A:  The  call  of  function  G  at  line  114  is  ambiguous  in  the 
presence  of  implicit  conversions. 

.  C35904A:  The  elaboration  of  subtype  declarations  SFX3  and  SFX4 

may  raise  NUMERIC_ERROR  instead  of  CONSTRAINT_ERROR  as  expected  in 
the  test. 

.  937401A:  The  object  declarations  at  lines  126  through  135  follow 

subprogram  bodies  declared  in  the  same  declarative  part. 

.  C41404A:  The  values  of  'LAST  and  'LENGTH  are  incorrect  in  the  if 

statements  from  line  74  to  the  end  of  the  test. 

.  34 51 1 6 A :  ARRPRIBL1  and  ARRPRIBL2  are  initialized  with  a  value  of 

the  wrong  type— PRIBCOL_TYPE  instead  of  ARRPRIBOOL_TY?E  —  at  line 
41. 

.  C46006A:  The  assumption  that  evaluation  of  default  initial  values 

occurs  when  an  exception  is  raised  by  an  allocator  is  incorrect 
according  to  AI-00397. 

.  349C0oA:  Object  declarations  at  lines  41  and  50  are  terminated 

incorrectly  with  colons,  and  end  case;  is  missing  from  line  42. 

.  84A010C:  The  object  declaration  in  line  18  follows  a  subprogram 

body  of  the  same  declarative  part. 


HD  HAWN  TECT3 


.  B7H'.01B:  The  begin  at  line  9  causes  a  declarative  part  to  oe 

treatea  as  a  sequence  of  statements. 

.  C37B50A:  The  call  of  "/="  at  line  31  requires  a  use  clause  for 

package  A. 

.  C93105A:  The  "/="  for  type  PACK. BIG_INT  at  line  40  is  not  visiDle 

without  a  use  clause  for  the  package  PACK. 

.  C940ACA:  The  assumption  that  allocated  task  TT1  will  run  prior  to 
tne  main  program,  and  thus  assign  SPYNUMB  the  value  checKed  for  by 
tne  main  program,  is  erroneous. 

.  CA3005A..D  (4  tests):  No  valid  elaboration  order  exists  for  these 

tests . 

.  3C3204C:  The  body  of  BC3204C0  is  missing. 


